This vulnerability (CVE-2026-50694) involves a use-after-free condition in the SSTP component of Windows 10 Version 1607 (build 10.0.14393.0). Exploitation could allow an unauthenticated attacker to execute arbitrary code remotely. The vulnerability has a high CVSS 3.1 base score of 8.1, reflecting network attack vector, high impact on confidentiality, integrity, and availability, and requires no privileges or user interaction. Microsoft has released an official fix for this issue as documented in their security update guide.

Successful exploitation of this vulnerability could lead to remote code execution by an unauthorized attacker, potentially resulting in full compromise of the affected system's confidentiality, integrity, and availability. This could allow attackers to run arbitrary code in the context of the affected system without requiring user interaction or privileges.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as soon as possible to remediate this issue. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50694 for detailed patch information and installation instructions.